          :body (html
                 [:body
                  [:h1 "API Server"]
-                 [:p "The application with client id " (get-session-value req  "session-id" (:session-store this) :client-id)
+                 [:p "The application with client id " (get-session-value req  SESSION-ID (:session-store this) :client-id)
                   " is requesting access to the Azondi API on your behalf. Please login if you are happy to authorize this client."]
                  [:form {:method :post
                          :action (path-for (:modular.bidi/routes req) ::post-authenticate-form)}

        (if-let [session
                 (get-session
                  (:session-store this)
                  (-> req cookies-request :cookies (get "session-id") :value))]
          ;; TODO Obey the 'prompt' value in OpenID/Connect
          (do
            (infof "Hi - it appears you're already logged in, session is %s" (pr-str session))

   [cylon.session :refer (create-session! assoc-session! ->cookie get-session-value get-cookie-value get-session)]
   [ring.middleware.cookies :refer (wrap-cookies cookies-request cookies-response)]))

(def SESSION-ID "session-id")

(defrecord AuthorizationServer [store scopes iss]

  WebService
